DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f7ad260e3a8805a53055ade160831637_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7ad260e3a8805a53055ade160831637_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f7ad260e3a8805a53055ade160831637_JaffaCakes118
Size
160KB
MD5
f7ad260e3a8805a53055ade160831637
SHA1
ed01078d375b0a0e6ec0a1259538b18fcafa8f2f
SHA256
bb3198c646f670e81104963cb6647b2cdea1653a93eff053520c21f82b5ec3f2
SHA512
442dd804671d0bcb24116cd736c872f9bd0d520b58ff8e37421765bd8589a566e44b6c1321cad34f38ec47017b03a4b014a6014728fb0a552419412c9fa1bf1c
SSDEEP
1536:pdaYLBdHlXfftHPzyDTvXr0KIZvT7NT8qVhW2RIu9oiWICS4AK1zoAIBivLaYnjO:eYLBntHGDT7aZhzbokY1zoA6UU
Checks for missing Authenticode signature.
resource |
---|
f7ad260e3a8805a53055ade160831637_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnumChildWindows
GetClassNameA
DefWindowProcA
EnumWindows
KillTimer
SetWindowPos
SystemParametersInfoA
DispatchMessageA
wsprintfA
SetTimer
GetWindowThreadProcessId
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
ReadFile
SetEndOfFile
CloseHandle
OpenProcess
MoveFileExA
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
GetSystemDirectoryA
GetLocalTime
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
CreateFileA
SleepEx
GetModuleFileNameA
GetTickCount
GetCurrentProcessId
SetLastError
TlsGetValue
WriteFile
GetFileAttributesA
CreateProcessA
HeapAlloc
SetFilePointer
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
IsBadWritePtr
GetCPInfo
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
LocalFree
InterlockedDecrement
InterlockedIncrement
HeapFree
VirtualAlloc
WideCharToMultiByte
RtlUnwind
GetLastError
MultiByteToWideChar
HeapReAlloc
GetCommandLineA
GetVersion
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
LCMapStringA
LCMapStringW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetFileType
SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
StrStrIA
CoInitialize
CoCreateGuid
CoCreateInstance
VariantInit
SysAllocString
GetErrorInfo
Netbios
InternetCloseHandle
InternetOpenA
InternetSetOptionA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
SHGetValueA
SHSetValueA
UuidToStringA
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ